Kjell Tore Guttormsen d441abba20 feat(post-mcp-verify): E7 — scan HTML comment nodes for injection ... The existing CRITICAL pattern in injection-patterns.mjs only fires when a comment body contains AGENT/AI/HIDDEN markers. Adversaries can drop the marker and still hide instructions inside <!-- ... --> for any agent that reads page source. This generalizes the comment scan: every comment body is HTML-entity-decoded and run through the full injection rule set. The existing keyword-restricted pattern still fires (defense-in-depth). Emits at the strongest tier with category html-comment-injection. +3 tests (65 → 68). Refs: Batch B Wave 4 / Step 11 / v7.2.0		2026-04-29 15:01:56 +02:00
..
fixtures	fix(memory-poisoning): E15 — add .claude/agents/*.md to target glob	2026-04-29 14:13:01 +02:00
helpers	test(llm-security): add JetBrains fixture tree + build helper	2026-04-18 10:49:49 +02:00
hooks	feat(post-mcp-verify): E7 — scan HTML comment nodes for injection	2026-04-29 15:01:56 +02:00
lib	feat(injection): E16 — homoglyph NFKC fold before every pattern match	2026-04-29 14:22:05 +02:00
scanners	fix(memory-poisoning): E15 — add .claude/agents/*.md to target glob	2026-04-29 14:13:01 +02:00